Splunk® App for Windows Infrastructure

Splunk App for Windows Infrastructure Reference

Download manual as PDF

Download topic as PDF

Network Activity

This topic discusses the Network Activity page, which shows you information about the network activity that has been collected from your Windows hosts.

How to use this page

Choose a list box to filter network activity based on that filter. You can either select an entry from the list box or select the search field and type in an entry. When you type in a string, the page only matches entries for events that have been collected previously.

You can choose or enter data from one of the following filters:

  • Local Host: Where the network transaction originated.
  • Direction: Whether the transaction was inbound or outbound from the local host.
  • Protocol: The protocol of the network activity (TCP or UDP).
  • Packet Type: The type of packet that was used in the transaction, one of "connect", "accept", or "transport".
  • Remote Host: Where the network transaction was destined.
  • Remote Port: The remote port that the network transaction used.
  • Local Port: The local port that the network transaction used.
  • Process Name: The program that initiated the network transaction.
  • User Name: The user that initiated the network transaction.

The Network Information pane shows all network transactions that apply to the filters you set. You can use the time picker in the upper right to limit the range of data that the panel shows.

Last modified on 30 November, 2016
Host Monitoring Services
Top Hosts and Processes

This documentation applies to the following versions of Splunk® App for Windows Infrastructure: 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.5.0, 1.5.1, 1.5.2, 2.0.0, 2.0.1

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters